Disclosed Chromium Security Bugs

Heap OOB read in ANGLE D3D11 backend via `GL_RGBX8_ANGLE` row pitch mismatch between validation and texture upload

#495052581•Reporter: se...@gmail.com
$3,000
8/14/2026

Potential Use-After-Free in WebRTC SctpDataChannel::SendAsync

#504716948•Reporter: vm...@google.com
$0
8/14/2026

Potential arbitrary extension installation via compromised network process in OEM Customization

#502771678•Reporter: vm...@google.com
$0
8/14/2026

Use-After-Free in WebContentsImpl::SetWindowRect

#506684534•Reporter: mi...@gmail.com
$0
8/14/2026

Service Worker Static Routing API cache source bypasses CORP in crossOriginIsolated context (fix wiring ineffective)

#505427216•Reporter: da...@gmail.com
$2,000
8/14/2026

Potential UXSS in iOS Bookmarks via TOCTOU during dismissal animation

#508448586•Reporter: li...@chromium.org
$0
8/14/2026

Potential Sandbox Escape via FD Use-After-Close in PrintingContextAndroid

#502156940•Reporter: vm...@google.com
$0
8/14/2026

Potential UAF in WindowEventDispatcher::DispatchGestureEvent via DispatchHeldEvents

#501576946•Reporter: vm...@google.com
$0
8/14/2026

Potential UAF/WAF in RenderWidgetHostViewAura via TSF IME COM callout

#502112506•Reporter: vm...@google.com
$0
8/14/2026

Potential Sandbox Escape via Bit-Packing Overflow in Skia Graphite Dawn YCbCr Descriptor

#496565479•Reporter: vm...@google.com
$0
8/14/2026
Showing 151-160 of 12354 bugs
1...151617...1236